paperbot · PL 论文追踪

全部论文 待读 收藏

P2 EchoFuzz: Empowering Smart Contract Fuzzing with Large Language Models

EchoFuzz:利用大语言模型增强智能合约模糊测试
ICSE Proceedings of the 2026 IEEE/ACM 48th International Conference on Software Engineering2026匹配度 3/10 · 论文用 LLM 改进智能合约模糊测试,属于 LLM 辅助软件测试/动态分析,但并非用户核心关注的静态分析、形式化验证、浮点程序分析或贝叶斯程序分析,也不涉及 ML 系统或 Agentic 程序分析。引用 1 inbox
Juanen Li, Peng Qian, Guanyan Li, Rui Wang, Peixin Wang, Zhiqing Tang, Fuchen Ma, Yuanliang Chen, Lun Zhang
crossref: 2026-09-12

AI 速览

一句话:提出 EchoFuzz,用大语言模型缓解智能合约模糊测试中的状态转移逻辑鸿沟与变异序列冗余问题。

智能合约管理着万亿美元数字资产,是攻击的重点目标。模糊测试是检测漏洞的有效手段,但现有方法面临两大挑战:(1) 状态转移的逻辑鸿沟与组合冗余,导致难以权衡漏洞检测效率与状态空间探索成本,关键执行路径被忽视;(2) 基于规则的序列变异策略存在路径冗余且缺乏合约逻辑指导,使深度漏洞导向的探索陷入性能瓶颈。为此,该文提出 EchoFuzz,利用大语言模型赋能智能合约模糊测试。摘要仅阐述了问题与思路,未报告具体方法与实验结果。

问题
智能合约模糊测试难以在漏洞检测效率与状态空间探索成本之间取得平衡,且基于规则的变异策略缺乏合约逻辑指导,导致关键执行路径被忽略。
方法
提出 EchoFuzz,利用大语言模型赋能智能合约模糊测试,以应对状态转移的逻辑鸿沟与变异策略的路径冗余问题。
评估
摘要未提供评估细节,依据标题与摘要无法判断具体评估方式。
原文摘要(Abstract)

Smart contracts, serving as the cornerstone of decentralized applications, autonomously manage trillion-dollar digital assets, making them attractive targets for attacks. Fuzzing has emerged as a promising technique for detecting vulnerabilities in smart contracts, yet existing methods face two main challenges. (1) The logical gap in state transitions and combinatorial redundancy hinders effective tradeoffs between bug detection efficiency and state space exploration cost, leading to critical execution paths to be overlooked. (2) Rule-based sequence mutation strategies suffer from path redundancy and inadequate guidance from contract logic, resulting in performance bottlenecks that stall the exploration of in-depth vulnerability-oriented paths.

链接与引用

DOI 原文 · PDF(开放获取) ·

BibTeX
@inproceedings{paperbot11674,
  title = {EchoFuzz: Empowering Smart Contract Fuzzing with Large Language Models},
  author = {Juanen Li and Peng Qian and Guanyan Li and Rui Wang and Peixin Wang and Zhiqing Tang and Fuchen Ma and Yuanliang Chen and Lun Zhang},
  booktitle = {ICSE},
  year = {2026},
  doi = {10.1145/3744916.3773166}
}